Director responsible for leading technology risk and compliance programs for Digital and Client Technology Solutions. Collaborating with Canadian senior management and external stakeholders for risk management and compliance initiatives.
Responsibilities
The Director, Technology Risk and Compliance will strategically develop, lead and oversee risk management and compliance programs for the Digital and Client Technology Solutions (DCTS) area, including: technology audits, business continuity, client assurance/privacy and application security compliance programs.
This role will provide governance support and maintain a comprehensive risk management framework across Canada Technology's diverse portfolio.
Collaborate with Canadian senior management on strategic decisions impacting technology risk management
Lead engagement with Canadian external stakeholders, regulators and industry bodies on complex compliance matters
Oversee comprehensive application security compliance programs spanning DCTS's multiple disciplines and business units to ensure the framework and standards are adhered to
Ensure delivery of audit processes to the adequate satisfaction of internal and external stakeholders from a governance and reporting perspective
Direct comprehensive reviews of identity, entitlement and privileged access management processes across all critical Canadian applications
Establish and manage strategic partnerships with Canadian business functions to enhance their access review capabilities and maturity
Act as the Business Continuity (BC) Coordinator and work with DCTS leaders, Enterprise Services and Corporate BCP and compliance offices ensuring all BC objectives are completed for the DCTS organization in a timely manner, including Disaster Recovery exercises.
Manage relationships with senior Canadian leadership, executive levels and external auditors regarding technology risk posture
Lead a team of 6-10 resources handling the day-to-day activities related to technology risk and compliance for DCTS.
Requirements
10 or more years of progressive experience in Information Security, Risk Management or related functions with significant management experience
Proven track record of leading complex, multi-disciplinary risk and compliance initiatives within large Canadian technology organizations
Client focused mindset - exceed the expectations of our internal and external customers.
Deep expertise in operational risk management frameworks and processes
Comprehensive knowledge of Canadian regulatory compliance requirements and industry standards (ISO 27001, NIST, SOC 2, etc.)
Exceptional communication and influencing skills with ability to present to Canadian executive leadership and external stakeholders
Strong business acumen with understanding of Canadian financial services industry and regulatory environment
Proven ability to build consensus and manage complex stakeholder relationships across Canada Technology Assets
Advanced certifications: CISSP, CISA, CRISC or equivalent enterprise security certifications
Experience in Canadian financial services or highly regulated Canadian industries
Advanced degree in Information Security, Risk Management, Business Administration or related field
Experience with enterprise GRC (Governance, Risk and Compliance) platforms and advanced analytics tools
For Quebec Residents: Bilingualism (French, English, both oral and written) is required as the position includes managing French and English-speaking staff (Quebec and outside Quebec) and providing daily support to the team.
Benefits
Great Place to Work® Certified for Most Trusted Executive Team in Canada – 2025, 2024 and 2023
Great Place to Work® Certified for Best Workplaces in Canada - 2025
Canada Order of Excellence for Mental Health at Work® certification from Excellence Canada.
Pension, stock and savings programs to help build and enhance your future financial security
Work and professional development that is united by our Purpose: to help Clients and Employees achieve lifetime financial security and live healthier lives
A friendly, collaborative and inclusive culture
Be part of our continuous improvement journey in developing the next greatest digital enterprise experience.
Competitive salary and bonus structure influenced by market range data
Flexible hybrid work model.
Job title
Director, Technology Risk and Compliance – Digital & Client Technology Solutions
Trade Compliance/Global Logistics Student role at Daktronics providing support to the corporate logistics team. Engaging in compliance initiatives, international relations, and data analysis tasks within a corporate environment.
Senior Manager Compliance and Certification coordinating external audits and compliance at D - Trust GmbH in Berlin. Ensuring regulatory adherence and leading audit preparation and execution.
Manager overseeing compliance in claims operations for L.A. Care Health Plan. Ensuring adherence to regulatory requirements and effective training development.
Senior Manager overseeing clinical case operations at L.A. Care Health Plan, ensuring compliance and quality in health services management. Leading a team and collaborating across departments for effective case handling.
Werkstudent Compliance supporting compliance management system development and conducting risk analyses. Collaborating in team tasks and organizing compliance training sessions.
Regulatory Affairs Specialist overseeing regulatory submissions in SEA for global medical device company. Ensuring compliance and managing stakeholder communications for product regulations.
Senior Associate supporting compliance solutions for institutional clients in asset management. Delivering regulatory compliance and risk management expertise within a hybrid work environment.
Compliance Analyst supporting the management of compliance models and processes at Tenpo. Contributing to building a solid compliance culture focusing on crime prevention and data protection.
Advertising Compliance Specialist ensuring compliance and operational excellence in the insurance sector. Collaborating on regulatory changes and supporting product development in a hybrid role.
Intern coordinating regulatory projects and compliance for Eversource Energy, engaging with legal, regulatory, and business teams. Involves monitoring regulatory changes and ensuring compliance across your duties.